Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/_tB8idHUBl9mgAs1Hohp3-rYTwY.roa
File: _tB8idHUBl9mgAs1Hohp3-rYTwY.roa (raw, json)
Hash identifier: yrf9tcU3qM0GtMYzp4FFMG6vBKiCiDP5ImFLxGqWMKg=
Subject key identifier: FE:D0:7C:89:D1:D4:06:5F:66:80:0B:35:1E:88:69:DF:EA:D8:4F:06
Certificate issuer: /CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Certificate serial: 018572BA90E3595BE2AB61E048AACF093622
Authority key identifier: 9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/_tB8idHUBl9mgAs1Hohp3-rYTwY.roa
Signing time: Mon 02 Jan 2023 13:45:07 +0000
ROA not before: Mon 02 Jan 2023 13:45:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198651
IP address blocks: 185.207.33.0/24 maxlen: 24
185.207.34.0/24 maxlen: 24
185.207.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:90:e3:59:5b:e2:ab:61:e0:48:aa:cf:09:36:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Validity
Not Before: Jan 2 13:45:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fed07c89d1d4065f66800b351e8869dfead84f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ff:3e:77:38:d3:a2:f6:d3:70:ef:15:19:38:
91:02:e5:96:0b:01:ac:c6:67:a3:aa:4d:e6:93:03:
11:1b:23:c4:55:5a:fa:ce:76:76:fb:9f:46:db:57:
ae:5e:74:db:94:ca:a8:66:6e:0d:5d:ab:e5:81:87:
dc:4a:97:18:05:20:ea:83:e2:96:70:fc:29:3d:a0:
a8:ca:9f:52:a5:48:26:b3:f4:c3:f0:07:8a:c8:15:
df:16:a9:e1:66:b4:94:76:fd:03:57:e9:f2:7e:1e:
61:5c:5f:17:de:e9:89:b1:22:52:d1:69:79:2c:48:
f7:a7:54:c4:be:4a:20:4b:d7:eb:ff:1e:8e:3b:f5:
80:c8:c3:8c:9f:2b:92:97:2d:31:1c:10:7a:b1:24:
0a:61:03:77:6f:21:73:b8:7c:6b:68:37:9e:b5:59:
1e:b5:83:65:1e:6a:fd:87:0b:89:43:61:a4:64:48:
98:13:df:35:5c:c4:18:50:22:e2:bd:c2:6a:19:93:
c8:9f:5b:31:f2:b5:04:8b:32:c7:de:1f:89:93:c0:
61:c1:8e:50:b2:6e:23:55:c5:90:44:72:67:ad:24:
cd:88:0d:a4:31:5f:72:48:17:6b:4d:38:2d:0f:bc:
65:42:8a:b0:ce:5c:15:50:3e:b0:0a:38:ad:95:23:
95:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D0:7C:89:D1:D4:06:5F:66:80:0B:35:1E:88:69:DF:EA:D8:4F:06
X509v3 Authority Key Identifier:
keyid:9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/_tB8idHUBl9mgAs1Hohp3-rYTwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.33.0-185.207.35.255
Signature Algorithm: sha256WithRSAEncryption
2d:03:76:4b:08:58:53:62:f8:11:68:02:55:f6:0d:f3:26:cd:
c8:73:f4:e5:51:6a:81:c5:20:d0:89:8b:2f:bf:d5:c6:f8:e0:
d8:32:ff:40:e0:ae:d5:d8:ef:77:ee:b5:3e:9f:ef:08:bd:d6:
b8:28:92:f8:60:84:05:5b:1d:49:0f:c6:f5:27:47:7d:1e:e6:
92:b5:9e:5d:1e:a2:d3:dc:e7:be:b9:e4:ad:56:2f:64:b6:11:
29:72:69:67:3a:cd:14:c6:e5:44:7c:64:f6:d1:fd:16:f2:a3:
68:d9:8d:5d:e2:55:1f:49:64:ea:b7:a4:75:65:22:ea:a5:a8:
96:df:5b:f0:32:7a:5c:d0:a0:1c:c0:7d:ad:11:ae:e5:e2:5f:
4e:8e:68:c3:6c:3d:7e:21:17:f8:88:ce:2d:26:2d:e3:c8:e7:
19:4b:a3:e8:cf:72:54:22:c7:0e:ab:24:48:be:47:12:8c:31:
81:4a:a1:77:86:5f:68:65:06:0f:ec:01:fd:5d:af:9b:44:04:
73:bb:d5:df:46:6a:a4:0a:91:f8:da:68:db:5d:74:51:74:1a:
c2:9b:69:e7:dc:4d:fa:3b:5e:f3:11:76:2c:77:f4:04:d8:19:
04:2c:43:06:00:04:4d:04:97:33:f2:74:c4:9f:65:e1:c4:ba:
a1:b5:ab:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:13 2024 by rpki-client on console-ams.rpki-client.org